Debian Security Advisory DSA 3020-1 (acpi-support - security update)

During a review for EDF, Raphael Geissert discovered that the acpi-support package did not properly handle data obtained from a user OpenVAS Vulnerability Test $Id: deb3020.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 3020-1 using nvtgen 1.0 Script version: 1.0 Author:...

Debian: Security Advisory (DSA-3020-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3020

install.sh in the Embedded WebSphere Application Server eWAS 7.0 before FP33 in IBM Tivoli Integrated Portal TIP 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program...

CVE-2014-3020

install.sh in the Embedded WebSphere Application Server eWAS 7.0 before FP33 in IBM Tivoli Integrated Portal TIP 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program...

CVE-2014-3020

CVE-2014-3020 affects IBM embedded WebSphere Application Server (eWAS) 7.0 bundled with IBM Tivoli/Directory Server. An optional install script (install.sh) may grant write access to the installRoot directory, enabling local privilege escalation via a Trojan horse. IBM security bulletins describe...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

CVE-2013-3020

CVE-2013-3020 is an Information Disclosure vulnerability in IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (versions 2.1/2.2/2.0). The IBM bulletin attributes this to disclosure of application implementation details via unspecified vectors. Affected products/vers...

CVE-2012-3020

The CVE-2012-3020 issue affects Siemens Synco OZW Web Server devices OZW672., OZW772. , and OZW775 with firmware prior to 4. The root cause is an unspecified default password that allows remote administrative access over a network session. Impact described in multiple sources: unauthorized admin ...

Google Chrome Multiple Vulnerabilities - February 12 (Linux 01)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12lin01.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Vulnerabilities - February 12 Linux 01 Authors: Madhuri D Copyright: Copyright c 201...

Google Chrome Multiple Vulnerabilities - February 12 (Windows 01)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12win01.nasl 5988 2017-04-20 09:02:29Z teissa $ Google Chrome Multiple Vulnerabilities - February 12 Windows 01 Authors: Madhuri D Copyright: Copyright c 201...

CVE-2011-3020

CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...

FreeBSD : chromium -- multiple vulnerabilities (2f5ff968-5829-11e1-8288-00262d5ed8ee)

Google Chrome Releases reports : 105803 High CVE-2011-3015: Integer overflows in PDF codecs. Credit to Google Chrome Security Team scarybeasts. 106336 Medium CVE-2011-3016: Read-after-free with counter nodes. Credit to miaubiz. 108695 High CVE-2011-3017: Possible use-after-free in database...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2009-3020

CVE-2009-3020 refers to a denial-of-service vulnerability in Windows Server 2003 SP2 via win32k.sys/Embedded OpenType Font Engine. The issue arises when a crafted .eot font is referenced in the src descriptor of an @font-face CSS rule in an HTML document, potentially allowing a remote attacker to...

CVE-2009-3020

creationtimestamp| type| source ---|---|--- 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9417...

MS08-044: Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (924090)

The remote host is running a version of some Microsoft Office filters that are subject to various flaws that could allow arbitrary code to be run. An attacker may use these to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote...

iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Office contains a number of input filters. These input filters allow transparent conversion from external types into a form that the Office applications can use. More...

CVE-2008-3020

CVE-2008-3020 is a remote code execution vulnerability in Microsoft Office filters, specifically in the BMPIMP32.FLT module used by Office BMP import handling. A crafted BMP image with a malformed header (e.g., an excessive number of colors) causes a heap buffer overflow/memory corruption in BMP ...